mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-10-26 06:19:53 +00:00
UNITRONIX
235c9c0706
Bump axios/multer and npm overrides; add safeSqlIdent and multer cleanup; harden JWT aud/iss/nbf; CSP without unsafe-eval via static protobuf build and data-bd-call delegation; ship Security Test Suite v1.2.0 and docs. Ignore generated RdClient protobuf artifacts (~40k lines) — rebuild locally with npm run protocols:rdclient. Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)
23 lines
618 B
Bash
23 lines
618 B
Bash
#!/usr/bin/env bash
|
|
# BetterDesk unified security suite (local only).
|
|
# Run before publishing a release to GitHub.
|
|
set -euo pipefail
|
|
|
|
ROOT="$(cd "$(dirname "$0")/.." && pwd)"
|
|
echo "== BetterDesk security suite =="
|
|
echo "Root: $ROOT"
|
|
|
|
echo ""
|
|
echo "-- Node: tests/security --"
|
|
cd "$ROOT/web-nodejs"
|
|
npm run test:security
|
|
|
|
echo ""
|
|
echo "-- Go: relay / sessiongrant / crypto connection security --"
|
|
cd "$ROOT/betterdesk-server"
|
|
go test ./relay/ ./sessiongrant/ ./crypto/ ./auth/ -count=1 \
|
|
-run 'ConnectionSecurity|AuthorizationRegistry|SignIdPk|IssueAndVerify|VerifyRejects|JWT'
|
|
|
|
echo ""
|
|
echo "Security suite PASSED."
|